Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8700dfc8-a1b7-3b89-8834-7cda66c55d6d.roa
File:                     8700dfc8-a1b7-3b89-8834-7cda66c55d6d.roa (raw, json)
Hash identifier:          ywUsBnO3jshx3o6TzYG9R8c9Vl+Yh80OfPjLX9CT10c=
Subject key identifier:   F6:1D:86:90:D5:4A:0F:61:F7:85:23:64:62:3A:E4:16:4C:D4:3D:1A
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584AC5AB8E861C01DAF660897800
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8700dfc8-a1b7-3b89-8834-7cda66c55d6d.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     14813
IP address blocks:        69.73.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:8e:86:1c:01:da:f6:60:89:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=41eb5194-9a36-4418-a0db-ceff07105d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:2b:ef:f3:f3:5a:9c:cc:3c:ed:a7:f2:7d:
                    45:65:13:ae:a0:59:1d:6a:e8:0d:28:ea:71:ac:e2:
                    66:ae:5c:68:58:ce:e0:11:16:e4:a6:28:d6:cc:d3:
                    88:f7:46:3f:65:e1:3c:5b:27:3f:8a:a4:18:a0:df:
                    a7:e7:6a:89:2f:f3:85:f1:62:bc:4c:88:36:70:b6:
                    0e:19:8a:2f:4c:82:c1:58:34:9f:76:f2:b5:bb:34:
                    68:1f:e3:20:04:13:80:55:aa:61:87:5a:90:b5:e8:
                    d9:49:cc:eb:4c:aa:9e:03:d6:62:96:fe:3a:48:58:
                    21:02:9e:06:77:42:0e:81:89:95:a4:9a:71:d6:31:
                    cd:4b:e3:aa:de:7b:e0:7a:4a:7c:aa:4a:fc:4a:ec:
                    4d:f5:a0:98:00:90:9d:86:04:54:01:89:7d:cc:2d:
                    24:26:87:82:5e:b9:d9:26:45:eb:6c:f6:d5:0d:9b:
                    7f:46:ed:cd:63:08:db:b0:a1:f1:e0:c0:ae:f0:57:
                    4f:3c:1c:ea:78:1e:0d:3e:a2:4a:56:e6:db:c1:54:
                    ae:7d:77:a2:a1:ac:31:de:a1:2a:d3:4b:c0:c8:db:
                    f2:76:21:5a:e2:f6:b9:3c:ae:d9:45:c2:6c:fb:eb:
                    89:9a:45:c2:d0:e4:d7:9d:f3:f0:8e:5c:e2:5e:8c:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1D:86:90:D5:4A:0F:61:F7:85:23:64:62:3A:E4:16:4C:D4:3D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8700dfc8-a1b7-3b89-8834-7cda66c55d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:74:55:a0:8a:d5:fa:9a:3a:a9:de:2b:6e:f1:53:cd:3c:65:
         8d:08:0e:91:fc:24:26:82:51:49:a8:ef:f7:36:35:98:18:1a:
         7d:0a:3d:51:9c:11:66:bf:20:c4:77:36:23:c2:a4:42:d3:11:
         b3:1b:c5:e0:05:51:26:d6:b5:14:62:ae:4f:30:28:06:50:3b:
         6f:5e:a6:b3:2f:f5:c2:ce:c5:64:3d:f4:9f:96:0c:31:65:39:
         dc:c1:1f:d5:ec:26:e7:f1:29:66:4f:63:db:2e:1e:45:42:eb:
         3b:e8:82:d5:92:26:00:03:66:a2:6d:aa:92:e3:19:e2:49:67:
         e9:d7:c9:4e:06:40:c4:ea:df:5e:3f:f2:5a:57:14:51:81:b0:
         6c:4e:a3:7f:72:2f:3e:08:e5:12:17:1f:f2:a7:22:92:e2:9e:
         44:56:52:ec:af:35:43:ff:b7:43:89:2a:a5:4d:31:7d:72:a1:
         df:77:38:3c:97:5d:e8:ca:a1:36:2a:8b:d4:6b:37:af:79:54:
         30:7d:b4:2c:e2:91:d7:1f:67:73:d7:76:55:0a:a8:ff:10:10:
         fa:6a:4f:44:92:e2:85:71:45:48:0a:b0:f3:6d:2c:a6:2b:79:
         01:e9:95:2a:0e:75:53:1d:24:7b:50:41:fd:05:14:22:42:ff:
         a6:9d:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:14:09 2025 by rpki-client